Snort mailing list archives
Re: CRv3?? [was RE: Code Red Rule?]
From: Andreas Brenk <ab () aegisnet de>
Date: Wed, 1 Aug 2001 02:54:53 +0200
* Mike Baptiste <baptiste () cc-concepts com> [010801 01:53]:
I guess it could be folks trying to find and alert anyone with a vulnerable host, but for the probes to appear 3 hours before the next infection window is, well, interesting.
When exactly does the next phase start? Wasn't that 02:00 CEST (20:00 EDT)? So it's already started?
Here's hoping for a dull evening. :)
That depends on where you live... it's actually a little later. :-) Good night I'd normally say at this time here in Germany. -- Mit freundlichen Grüßen Andreas Brenk mailto:ab () aegisnet de AegisNet IT-Dienstleistungen Postfach 62 03 71 22403 Hamburg http://www.aegisnet.de Tel. und Fax: +49-(0)700-AEGISNET _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Code Red Rule? Richard Parker (Jul 30)
- RE: Code Red Rule? John Berkers (Jul 31)
- CRv3?? [was RE: Code Red Rule?] Mike Baptiste (Jul 31)
- Re: CRv3?? [was RE: Code Red Rule?] Douglas R. Wilson (Jul 31)
- Re: CRv3?? [was RE: Code Red Rule?] Mike Baptiste (Jul 31)
- Re: CRv3?? [was RE: Code Red Rule?] Andreas Brenk (Jul 31)
- CRv3?? [was RE: Code Red Rule?] Mike Baptiste (Jul 31)
- RE: Code Red Rule? John Berkers (Jul 31)